Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/sGBKj9BuTL8-vyI1eNNcZA2J62c.roa
File:                     sGBKj9BuTL8-vyI1eNNcZA2J62c.roa (raw, json)
Hash identifier:          9i5RydSfKxc8q3kmqwIe3KviOiOI5AeNewKVc+CPVwk=
Subject key identifier:   B0:60:4A:8F:D0:6E:4C:BF:3E:BF:22:35:78:D3:5C:64:0D:89:EB:67
Certificate issuer:       /CN=179C63DB1D6F3AB2FB0EE78E1A897B85BBD2A602
Certificate serial:       03
Authority key identifier: 17:9C:63:DB:1D:6F:3A:B2:FB:0E:E7:8E:1A:89:7B:85:BB:D2:A6:02
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/sGBKj9BuTL8-vyI1eNNcZA2J62c.roa
Signing time:             Wed 13 Apr 2022 03:53:40 +0000
ROA not before:           Wed 13 Apr 2022 03:53:40 +0000
ROA not after:            Thu 13 Apr 2023 01:26:39 +0000
asID:                     63895
IP address blocks:        103.185.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179C63DB1D6F3AB2FB0EE78E1A897B85BBD2A602
        Validity
            Not Before: Apr 13 03:53:40 2022 GMT
            Not After : Apr 13 01:26:39 2023 GMT
        Subject: CN=B0604A8FD06E4CBF3EBF223578D35C640D89EB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:55:9b:d6:71:3b:db:10:4b:a9:c3:1a:60:
                    f4:b7:32:4d:dd:4b:1d:af:3d:52:f3:c6:31:b9:ef:
                    78:d9:ef:0c:0e:a5:88:21:b6:e2:71:0c:47:49:96:
                    05:cb:a5:98:15:f7:ad:75:77:65:34:7a:49:b9:04:
                    50:ec:8c:30:67:83:40:e0:c3:fe:29:fa:bc:1b:de:
                    da:63:ae:b4:d6:83:c7:5b:4f:36:eb:84:a9:9d:78:
                    b5:c1:48:7a:9b:be:4e:2a:5d:f8:56:88:e0:7a:9d:
                    8c:92:49:8f:33:73:1f:69:01:e2:a1:16:8d:a5:f1:
                    6c:3f:a7:fc:41:18:99:fa:d6:a3:ee:b2:5f:bf:90:
                    47:0c:8d:38:16:bf:a0:be:48:e6:4f:42:7b:cb:8e:
                    94:2c:47:c4:37:aa:65:07:0e:e2:15:02:79:e0:07:
                    d3:2d:9d:82:3d:b6:27:e0:1c:32:8f:e1:53:d8:7d:
                    3c:f8:34:ec:12:47:8d:84:03:95:81:10:f1:8a:a1:
                    aa:ef:63:48:be:e0:53:16:d1:ac:dd:01:59:0b:cf:
                    61:1b:91:e1:f0:e4:10:c5:7f:ea:53:31:0d:de:1d:
                    37:1e:5b:7c:e9:bf:31:63:e1:cf:b1:75:74:db:d4:
                    ab:3e:07:3c:fc:6d:28:d2:16:d9:ae:65:24:53:c2:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:60:4A:8F:D0:6E:4C:BF:3E:BF:22:35:78:D3:5C:64:0D:89:EB:67
            X509v3 Authority Key Identifier:
                keyid:17:9C:63:DB:1D:6F:3A:B2:FB:0E:E7:8E:1A:89:7B:85:BB:D2:A6:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/F5xj2x1vOrL7DueOGol7hbvSpgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/sGBKj9BuTL8-vyI1eNNcZA2J62c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:60:ca:da:db:eb:30:e9:0d:2c:5b:08:49:95:b2:8b:de:
         61:a9:eb:cb:e6:64:2f:c1:f4:4e:64:40:7e:ca:af:71:2c:28:
         88:82:a9:7e:13:04:13:7e:28:0b:97:75:6c:6c:5c:27:ec:69:
         5b:50:af:b5:c3:cc:47:92:50:f1:3f:47:6f:89:9a:64:f3:72:
         c1:f6:52:4c:e7:79:b2:e0:10:c6:35:ba:2f:03:2f:6f:b6:cd:
         d1:1a:f4:8a:db:c8:57:f2:58:3e:5e:11:90:f5:1a:18:ab:f7:
         2f:a2:1e:57:de:0c:65:c3:0e:fd:e9:11:04:5c:a9:bb:4a:d3:
         08:ee:16:62:c3:5a:70:d6:9b:2b:9c:d8:2b:e9:fa:1a:0a:ca:
         ac:78:a9:34:7a:27:5b:50:18:b5:38:3c:27:6a:8e:fa:be:aa:
         c9:45:50:d7:0e:d7:55:70:2a:4f:b2:f5:a5:34:6c:a3:75:68:
         af:3b:23:5b:b9:a3:07:04:0c:0c:35:74:50:db:97:8c:ca:88:
         fa:4b:ba:be:5a:87:90:53:11:25:03:b4:8e:11:17:a1:84:87:
         d1:b8:8d:05:da:8c:80:f2:87:f8:84:b1:a7:23:fe:f9:0b:2b:
         70:02:53:59:31:8b:14:d1:81:a3:00:cb:ea:00:44:8f:f4:7b:
         7f:97:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:57 2023 by rpki-client on console-fra.rpki-client.org